Configuring Google as an identity provider

You can use Google as an identity provider to access SC//Nexus™. To do this, you create a custom SAML application on the Google platform.

SC//Nexus service provider details

SC//Nexus publishes the following service provider details for your identity provider. The steps on this page show which of them Google uses and where to enter them.

Create the Google custom SAML app

The Google documentation provides the steps for creating a custom SAML app on their platform. For more information, see SAML configuration for Google Workspace in the Google Cloud documentation.

1. Access the Google Admin Portal at https://admin.google.com.
2. From the Google Admin Portal, choose Apps, Web and mobile apps.
3. From the Web and mobile apps page, use the Add app drop-down menu and choose Add custom SAML app.
4. From the Add custom SAML app workflow, do the following.
   1. On the App details page, for App name specify a name for the application and then choose Continue. We suggest a name like SC//Nexus.
   2. On the Google Identity Provider details page, use option 1 to download the Google identity provider metadata. Provide the downloaded file to your Scale Computing account manager or Support, who adds it to your SC//Nexus organization.
   3. On the Service provider details page, specify the following SC//Nexus details.
      1. For ACS URL, specify https://nexus.scalecomputing.com/sso/api/oauth/saml.
      2. For Entity ID, specify https://saml.stargate.local.
      3. For Start URL, leave the field blank.
      4. For Name ID format, choose EMAIL.
      5. For Name ID, choose Primary email.
      6. Select Signed response only if your configuration requires it. SC//Nexus requires the assertion to be signed, which Google does by default, and does not require a signed response.
   4. On the Attribute mapping page, leave the default settings and choose Finish.

Provide the Google identity provider metadata

Once your Google custom SAML app exists, download Google's identity provider metadata and provide it to your Scale Computing account manager or Support. The metadata is added to your SC//Nexus organization, after which you can use Google authentication to access SC//Nexus.